EUVD-2026-86513

IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WINCERTIFICATE data "IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" instead of parsing and validating the PKCS signature data...

CVE-2026-97732

The IRONMACE Ironshield 1.0.0.167 software contains a vulnerability in its tvk.sys kernel-mode driver. The root cause is that the driver authenticates client executables by searching for specific strings ("IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" ) within WIN_CERTIFICATE data instead of...

CVE-2026-79153

The Seclore FileSecure Desktop Client before version 3.25.1.0 contains an improper access control vulnerability within its kernel-mode driver component. This flaw allows an authenticated local user to achieve privilege escalation to NT AUTHORITY\SYSTEM on affected systems. No specific exploit cod...

CVE-2026-19775: Missing Authorization

The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

CVE-2026-97732: Improper Verification of Cryptographic Signature

IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WINCERTIFICATE data "IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" instead of parsing and validating the PKCS signature data...

PT-2026-99064

Name of the Vulnerable Software and Affected Versions GLPI versions 0.72 through 10.0.25 GLPI versions 11.0.0 through 11.0.7 Description An authenticated user without the necessary permissions can enable debug mode because the user-setting update process fails to enforce the privilege boundary...

EUVD-2026-87080

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

PT-2026-98349

Name of the Vulnerable Software and Affected Versions IRONMACE Ironshield version 1.0.0.167 Description The tvk.sys kernel-mode driver authenticates client executables by verifying expected publisher and root-certificate strings within the WIN CERTIFICATE data, specifically checking for "IRONMACE...

Linux Distros Unpatched Vulnerability : CVE-2026-98143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPUSETIFM,OFMPRECISION select the activation storage mode on U85 only. On U65 th...

CVE-2026-98143: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPUSETIFM,OFMPRECISION select the activation storage mode on U85 only. On U65 the same field holds the rounding mode, and the command stream parser h...

PT-2026-98363

Name of the Vulnerable Software and Affected Versions OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin versions prior to 1.1.8 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticat...

CVE-2026-79153: Improper Privilege Management

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

CVE-2026-45801: Improper Privilege Management

GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an authenticated user without the required permission can enable debug mode. The affected user-setting update does not enforce the privilege boundary intended to restrict debug-mode activation. This issue...

CVE-2026-79153

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

PT-2026-98838

Name of the Vulnerable Software and Affected Versions Seclore FileSecure Desktop Client versions prior to 3.25.1.0 Description An improper access control issue exists in the kernel-mode driver component. This allows an authenticated local user to elevate their privileges to NT AUTHORITYSYSTEM,...

CVE-2026-98143

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPUSETIFM,OFMPRECISION select the activation storage mode on U85 only. On U65 the same field holds the rounding mode, and the command stream parser h...

openSUSE 16 Security Update : gnome-remote-desktop (openSUSE-SU-2026:21888-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21888-1 advisory. This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow...

Linux Distros Unpatched Vulnerability : CVE-2026-93234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed-size GUDCONNECTORTVMODENAMELEN entries and require...

CVE-2026-98074

In the Linux kernel, the following vulnerability has been resolved: bonding: do not clear curractiveslave prematurely when releasing all slaves When releasing all slaves during bond destruction all == true, bondreleaseone unconditionally clears bond-curractiveslave to NULL in every iteration. If ...

Linux Distros Unpatched Vulnerability : CVE-2026-98074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: do not clear curractiveslave prematurely when releasing all slaves When releasing all slaves during bond destruction all == true, bondreleaseone...